Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b61e7bba-f1f6-3c61-9e10-8f989737ef68.roa
File:                     b61e7bba-f1f6-3c61-9e10-8f989737ef68.roa (raw, json)
Hash identifier:          W+7J8XNiy98YRnxXqRbWPhJ9ayYt/3vbzNskcV67FaU=
Subject key identifier:   76:DB:7B:3C:E1:22:C3:78:39:D9:AB:FF:41:CB:AA:94:9F:D1:4A:9E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D701A367A3C6585EDE280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b61e7bba-f1f6-3c61-9e10-8f989737ef68.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     40306
IP address blocks:        70.41.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:70:1a:36:7a:3c:65:85:ed:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=27376391-9fa5-45c9-801b-e248b9ba09cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:e6:00:55:ba:ed:fb:cb:26:64:1c:43:34:
                    77:7a:15:c3:28:e1:55:28:b2:9f:56:81:35:48:38:
                    5d:d9:df:f3:f3:92:15:fb:1c:64:aa:93:5f:d1:b5:
                    29:66:34:a0:b3:56:e9:8c:1c:54:07:1c:9e:03:99:
                    6f:5d:45:8e:d2:12:06:64:6f:4f:bf:e1:79:95:c3:
                    54:90:0f:07:67:d3:cc:75:1c:2f:ad:94:c1:53:7f:
                    36:9b:1a:5c:c5:ca:bf:66:f3:98:95:bc:62:2e:fe:
                    0c:40:b5:ac:13:4f:13:a9:ad:cb:b4:f7:d2:58:85:
                    31:05:0d:c7:61:85:74:5e:1a:30:5d:7f:26:d2:28:
                    83:f2:d2:44:9c:6b:10:22:4a:94:f4:26:6c:68:b2:
                    01:8b:a6:21:8a:c1:00:e3:9e:bc:b6:8b:88:24:d2:
                    83:30:4f:e1:ed:c1:a1:78:b4:6d:09:e9:ee:fc:52:
                    96:a9:bd:94:fa:dc:33:91:33:62:57:96:19:46:df:
                    f7:27:9e:18:c7:d9:e5:40:5c:bd:6d:89:52:20:bc:
                    04:f2:49:ef:51:e6:60:9b:f2:60:9b:52:27:d0:5f:
                    c0:ef:eb:68:fa:42:91:d8:23:9d:c5:63:4e:d6:03:
                    9e:bc:14:a5:d7:e1:95:fa:03:24:44:d6:f7:cc:43:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DB:7B:3C:E1:22:C3:78:39:D9:AB:FF:41:CB:AA:94:9F:D1:4A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b61e7bba-f1f6-3c61-9e10-8f989737ef68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:d7:86:85:9d:7a:0d:d2:9d:66:29:d3:47:76:9c:da:a0:
         87:3a:69:2b:f1:93:7a:e1:5c:6c:77:bd:a3:14:13:66:01:54:
         b3:11:18:49:f6:8d:b6:2b:64:fc:98:88:8a:93:b7:2e:34:5b:
         3e:6e:d1:70:3e:0c:29:9d:0c:bb:c9:da:a4:e9:d0:41:f2:e5:
         a0:b7:d8:54:d8:ed:5e:cf:50:60:fd:c0:7a:67:d4:68:99:78:
         90:18:fc:34:98:3f:da:db:e6:bd:ea:f1:61:9e:77:30:f8:3a:
         b0:77:94:7c:b0:40:6c:af:ad:0f:0a:41:58:bc:34:ad:c0:8d:
         a0:91:8d:67:9f:f5:92:fd:93:15:f9:9e:47:ed:6c:d4:80:22:
         1c:f4:00:ef:4a:80:54:bf:b9:20:38:17:0e:b6:46:ec:0c:1e:
         d1:99:ac:78:1c:2c:36:af:67:be:97:4d:46:1c:ff:fb:7d:ac:
         4b:ce:a7:03:30:68:41:6d:f8:7b:df:ee:73:73:79:c6:8d:9c:
         ba:70:9b:ff:83:6d:a9:38:0c:34:2f:b5:43:f2:6e:61:42:cc:
         e6:3a:2e:19:85:0e:48:66:30:31:83:3c:6c:7c:67:cc:af:b8:
         e4:84:6d:52:aa:bf:aa:03:3f:61:50:b9:7f:71:68:13:6a:6c:
         f4:06:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org